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APPENDIX A 



1 . (Currently amended) A method for setting basic means of access for operation of devices 
of which the operation is controllable by electronic means, comprising: 

said devices comprising mobile phones, small computer-controlled consumer devices with 
relatively low level of computing power, computers, motor vehicles, control terminals for 
industrial processes, all of which devices may require authentication prior to operation; 



establishment of a link between a personal authentication system supplied with encryption data 
and a logic system able to control an electronic device control, said encryption data heinp stored 
solely in said authentication system : 

checking said encryption data in said authentication system prior to operation of said electronic 
device control; 



assignment of predetermined means of access to said electronic device control associated with 
said authentication system said predetermined means providing access to physical hardware 
resources and access to different software functions, based on the privileges of the user who 
identified himself to the system, said software function evaluates a security token and is running 
on top of said physical hardware, said predeter mined means of access being dependent np nn rh e 
level of a uthorization that is set in said personal authorization sv^m - 

enabling of said predetermined means for access piLik-liiiiihicd for said authentication system 
dependent on the result of said check. 
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2 . (Previously presented) The method defined in Claim 1 , wherein said basic means of 
access to functions of said device comprise at least one of the following means: disable operation 
of said devices, enable operation of said devices, or enable configuration of said devices. 

3. (Previously presented) The method defined in Claim 2 wherein said link is made without 
need for Intermediate software layers. 

4. (Previously presented) The method defined in Claim 3 includes in addition, the step of 
reading at least one of the following features embodied within said authentication system: 
firmware programs, device-specific command sequences for execution of specific device-specific 
functions, cryptographic keys, cryptographic algorithms, and individual decision-making logic. 

5. (Previously presented) The method defined in claim 4 which includes configuration of 
said devices; by authorized persons, wherein after successful authentication, device-specific 
configuration data are downloaded into said devices from said authentication system in 
accordance with said authentication systems or over a network. 

6. (Previously presented) A device comprising the elements defined in Claim 5 for 
execution setting basic means of access for operations. 

7 . (Previously presented) An authentication system, created for authentication of a person 
or a group of people, comprising the elements defined in Claim 5. 

8. (Previously presented) The authentication system defined in Claim 7 which is 
implemented in the form of a SmartCard . 
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9. (Previously presented) A system for setting basic means of access for operation of 
devices of which the operation is controllable by electronic means, including at least one device 
and an authentication system as defined in Claim 8. 

1 0. (Previously presented) A computer program, containing program code areas for the 
execution or preparation for execution of the steps of the method in accordance with Claim 4, 
when said program is installed in a computer. 

1 1 . (New) A method for setting basic means of access for operation of devices of which the 
operation is controllable by electronic means, comprising: 

said devices comprising small computer-controlled consumer devices with 

relatively low level of computing power, computers, motor vehicles, control terminals for 

industrial processes, all of which devices may require authentication prior to operation; 

establishment of a link between a personal authentication system supplied with encryption data 
and a logic system able to control an electronic device control, said encryption data being stored 
solely in said authentication system; 

checking said encryption data in said authentication system prior to operation of said electronic 
device control; 

assignment of predetermined means of access to said electronic device control associated with 
said authentication system said predetermined means providing access to physical hardware 
resources and access to different software functions, based on the privileges of the user who 
identified himself to the system, said software function evaluates a security token and is riinning 
on top of said physical hardware, said predetermined means of access being dependent upon the 
level of authorization that is set in said personal authorization system; 

enabling of said means for access predetermined for said authentication system dependent on the 
result of said check. 
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